io.cdap.plugin.gcp.publisher.source.GCPCredentialsProvider Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of google-cloud Show documentation
Plugins for Google Big Query
The newest version!
/*
 * Copyright © 2019 Cask Data, Inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License"); you may not
 * use this file except in compliance with the License. You may obtain a copy of
 * the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
 * License for the specific language governing permissions and limitations under
 * the License.
 */

package io.cdap.plugin.gcp.publisher.source;

import com.google.api.client.auth.oauth2.Credential;
import com.google.api.client.googleapis.auth.oauth2.GoogleCredential;
import com.google.api.services.pubsub.PubsubScopes;
import com.google.common.base.Strings;
import org.apache.spark.streaming.pubsub.SparkGCPCredentials;

import java.io.ByteArrayInputStream;
import java.io.File;
import java.io.FileInputStream;
import java.io.FileNotFoundException;
import java.io.IOException;
import java.io.InputStream;
import javax.annotation.Nullable;

/**
 * Hack to replace the one in Bahir, which is incompatible with the version of the pubsub library
 * used by this project.
 */
public class GCPCredentialsProvider implements SparkGCPCredentials {
  private final String serviceAccount;
  private final boolean isServiceAccountFilePath;
  private transient Credential credential;

  public GCPCredentialsProvider(@Nullable String serviceAccount, boolean isServiceAccountFilePath) {
    this.serviceAccount = serviceAccount;
    this.isServiceAccountFilePath = isServiceAccountFilePath;
  }

  @Override
  public Credential provider() {
    if (credential == null) {
      if (!Strings.isNullOrEmpty(serviceAccount)) {
        if (isServiceAccountFilePath) {
          loadFromFile(serviceAccount);
        } else {
          credential = loadFromJSONContent(serviceAccount);
        }
      } else if (isServiceAccountFilePath) {
        try {
          credential = GoogleCredential.getApplicationDefault();
        } catch (IOException e) {
          throw new IllegalArgumentException("Unable to load credentials from environment", e);
        }
      } else {
        throw new IllegalArgumentException("Unable to load credentials from environment");
      }
    }
    return credential;
  }

  private void loadFromFile(String serviceAccountFilePath) {
    try (InputStream is = new FileInputStream(new File(serviceAccountFilePath))) {
      credential = GoogleCredential.fromStream(is)
        .createScoped(PubsubScopes.all());
    } catch (FileNotFoundException e) {
      throw new IllegalArgumentException("Service account file " + serviceAccountFilePath + " does not exist.");
    } catch (IOException e) {
      throw new IllegalArgumentException("Unable to load credentials from " + serviceAccountFilePath, e);
    }
  }

  private GoogleCredential loadFromJSONContent(String jsonContent) {
    InputStream jsonInputStream = new ByteArrayInputStream(jsonContent.getBytes());
    try {
      return GoogleCredential.fromStream(jsonInputStream).createScoped(PubsubScopes.all());
    } catch (IOException e) {
      throw new IllegalArgumentException("Unable to load credentials ", e);
    }
  }

  /**
   * Builds credentials.
   */
  public static class Builder {
    private String serviceAccountFilePath;
    private boolean isServiceAccountFilePath;

    public Builder jsonServiceAccount(String serviceAccountFilePath) {
      this.serviceAccountFilePath = serviceAccountFilePath;
      return this;
    }

    public Builder setIsServiceAccountFilePath(boolean isServiceAccountFilePath) {
      this.isServiceAccountFilePath = isServiceAccountFilePath;
      return this;
    }

    public GCPCredentialsProvider build() {
      return new GCPCredentialsProvider(serviceAccountFilePath, isServiceAccountFilePath);
    }
  }
}